I don't think "CS are idiots and use their kernel-level trojan to accidentally crash every Windows computer it's running on across the whole world" was ever on anyone's threat board[0]. Maybe they have considered IT outage of their own systems, but this wasn't that - this hit everyone all at once.

Should hospitals plan on not being able to provide medical care and not able to transfer their patients elsewhere, or divert the inflow of new patients elsewhere, because every other hospital is down too, there is no one left to provide care, and 911 is shot anyway? Maybe. Right after planning for a nuclear explosion over the city.

What happened was pretty much an "act of God"-level crisis, except caused by a de-facto infrastructure provider with way more destructive power than they're equipped to handle. IMO, not only CrowdStrike should be liable for the damage and lives lost because of the outage, this incident should be a prompt to rethink the entire idea of endpoint security.

--

[0] - I think it should be, but then I think the entire business with endpoint protection is bullshit.